Security Operations Engineering Consultant

Who are we?

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS

As a Security Operations Engineering Consultant (m/w/d) based in Germany you will contribute to various SOC projects as a subject matter expert. You have a good knowledge of SOC engineering concepts such as log onboarding, detection engineering, SIEM and MDR technologies. As an expert you play an advisory role, you also take ownership of the design and implementation of a variety of solutions for customers across
different sectors.
You have strong communication and interpersonal skills, which enable you not only to understand requirements, but also to put these requirements into a development plan, explain it to customers and guarantee proper execution. You have an open and approachable mind, in line with NVISO's values.

Typical tasks include but are not limited to:

• Planning and managing the onboarding of new log sources, troubleshooting
  issues with log sources or systems with clients and vendors;
• Creating technical and process playbooks;
• Defining and setting up correlation rules, based on threat intelligence and
  specific customer requirements;
• Contributing to incident response procedures with your expert insights;
• Ensuring you remain up to speed with latest trends and technologies in the
  SOC field.

You are passionate about cyber security, engineering and automation. Building
solutions and working with customers energizes you and you look forward to
growing in all the aforementioned domains.

• You are eligible for NATO Clearance;
• Expertise in Azure Sentinel and the Microsoft Security stack, and/or SIEM
  technologies such as Elastic, Splunk, LogPoint;
• Experience in fine-tuning and setting up detection rules;
• Practical experience with SIEM query languages, and/or Sigma and YARA
  rules;
• Ideally, at least two years of experience as a SOC Analyst, enabling you to
  contribute to the development of playbooks and incident response procedures;

Soft Skills:

• Ability to work independently, and keep track of your priorities;
• Strong interpersonal and verbal/written communication skills that enable the
  ability to work effectively in a collaborative team environment across the entire
  company;
• Excellent English communication skills, both verbal and written; Dutch and/or
  French is a plus;
• A positive, team-oriented, and mission-driven attitude;
• Ability to prepare and present your work to colleagues.

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• A training budget of 10,000 EUR plus 10 days paid time off rolling over two years;
• Working with and learning from the best people in the European cyber security "scene". We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.);
• A forward-thinking and agile company that supports you in the creation and implementation of new initiatives ;
• Unique team events (most recently e.g. Lisbon, Dubai, Malta);
• A sophisticated coaching concept starting on day 1;
• 30 days of vacation;
• Flexible working hours and home office options (Working Abroad Option);
• Cost absorption for the Klimaticket;
• Company bike leasing.

Disclaimer on the Use of AI Tools in the Application Process

Please be aware that the creation and submission of application documents (e.g. CV, cover letter, case studies, etc.) using AI-powered tools is only permitted to a limited extent.

Our expectations:

Application documents must authentically reflect your own qualifications, personality, and motivation.

The use of AI for supportive purposes (e.g. spell-checking, improving wording) is acceptable.

Fully generated application documents created by AI without personal adaptation or review are not permitted.

Under no circumstances may NVISO information, data, or documents be uploaded to or processed by external AI tools.

We reserve the right to exclude applications from the selection and interview process that are clearly created primarily or exclusively by AI and show no recognizable personal input.

The purpose of this policy is to ensure a fair and transparent recruitment process and to obtain an authentic impression of our applicants.